Glad to hear this was identified and you have a workaround.
Software sure does get messy sometimes .. most folks don't appreciate
the difficulty of the work.
On 3/20/23, Kevin Huntly <kmhun...@gmail.com> wrote:
> Hey Chris!
>
> I actually fixed (well, figured out) the MySQL problem - it looks like it's
> hard coded to a 2048b DH key, but I configured my servers for CIS level 2
> which wants a minimum 3072. I can update the openssl config to utilize a
> lower security level and it works just fine.
>
> I don't want to do that, but I don't want to have a nonsecure instance
> either. so im probably going to go with an ssh tunnel since this is just
> dev and it won't be going to production (our prod is db2)
>
> On Mon, Mar 20, 2023, 20:09 Christopher Schultz <
> ch...@christopherschultz.net> wrote:
>
>> Kevin,
>>
>> On 3/18/23 19:04, Kevin Huntly wrote:
>> > I can't use tomcat 10 because of the switch to jakarta for the servlet
>> > container - I'd have to rewrite a lot of code. That being said, I got
>> > it
>> > fixed:
>> >
>> > All JDBC and JNDI lookups were prefixed with "java:comp/env/" and
>> > things
>> > worked. Clearly, IBM's WebSphere does this for you, since that's
>> primarily
>> > what I develop against...
>>
>> I had to read the whole thread to find this ^^^. You are correct, Tomcat
>> gives you an initial context that is rooted at, well, the root of the
>> JNDI tree. IMHO any product that locks you into java:comp/env is doing
>> you a disservice.
>>
>> It wasn't clear to me whether you were using Tomcat's "global naming
>> resources" or per-context resources. Your posted snippets have all
>> expired so I couldn't look at them.
>>
>> But it looks like you have everything working, so ... great!
>>
>> You mentioned having a MySQL/MariaDB admin question. Please post that
>> separately (different thread, different subject) and annotate it with a
>> "[OT]" prefix to indicate that it's off-topic. We may have answers for
>> you (I know a lot about MySQL/MariaDB) but this isn't the "correct"
>> forum for such questions, hence the "off-topic" moniker.
>>
>> -chris
>>
>> > ________________________________________________
>> >
>> > Kevin Huntly
>> > Email: kmhun...@gmail.com
>> > Cell: 716/424-3311
>> > ________________________________________________
>> >
>> > -----BEGIN GEEK CODE BLOCK-----
>> > Version: 1.0
>> > GCS/IT d+ s a C++ UL+++$ P+(++) L+++ E---
>> > W+++ N+ o K(+) w--- O- M-- V-- PS+ PE Y(+)
>> > PGP++(+++) t+ 5-- X-- R+ tv+ b++ DI++ D++
>> > G++ e(+) h--- r+++ y+++*
>> > ------END GEEK CODE BLOCK------
>> >
>> >
>> > On Sat, Mar 18, 2023 at 6:31 PM John Dale (DB2DOM) <jcdw...@gmail.com>
>> > wrote:
>> >
>> >> Here's what I use for development:
>> >>
>> >> apache-tomcat-10.0.6
>> >>
>> >> java --version
>> >> openjdk 11.0.9.1 2020-11-04
>> >> OpenJDK Runtime Environment (build 11.0.9.1+1-post-Raspbian-1deb10u2)
>> >> OpenJDK Server VM (build 11.0.9.1+1-post-Raspbian-1deb10u2, mixed
>> >> mode)
>> >>
>> >> I have tremendous success running this combination.
>> >>
>> >> For production ..
>> >>
>> >> Raspbian flows through to ubuntu/debian with practically no issues
>> >> except Pi has a problem with ipchainining and NAT.
>> >>
>> >> Start firing away to jcdw...@gmail.com with questions regarding MySQL.
>> >>
>> >> I'll do what I can.
>> >>
>> >> John
>> >>
>> >>
>> >> On 3/18/23, Kevin Huntly <kmhun...@gmail.com> wrote:
>> >>> Hey Everyone,
>> >>>
>> >>> Is this possibly happening because I'm using JDK19 and not 8 or 9?
>> >>> ________________________________________________
>> >>>
>> >>> Kevin Huntly
>> >>> Email: kmhun...@gmail.com
>> >>> Cell: 716/424-3311
>> >>> ________________________________________________
>> >>>
>> >>> -----BEGIN GEEK CODE BLOCK-----
>> >>> Version: 1.0
>> >>> GCS/IT d+ s a C++ UL+++$ P+(++) L+++ E---
>> >>> W+++ N+ o K(+) w--- O- M-- V-- PS+ PE Y(+)
>> >>> PGP++(+++) t+ 5-- X-- R+ tv+ b++ DI++ D++
>> >>> G++ e(+) h--- r+++ y+++*
>> >>> ------END GEEK CODE BLOCK------
>> >>>
>> >>>
>> >>> On Sat, Mar 18, 2023 at 5:10 PM Kevin Huntly <kmhun...@gmail.com>
>> wrote:
>> >>>
>> >>>> Hey John - if you're out there can you email me direct? I have a
>> >>>> MySQL
>> >>>> admin question if you have the time and the inclination
>> >>>> ________________________________________________
>> >>>>
>> >>>> Kevin Huntly
>> >>>> Email: kmhun...@gmail.com
>> >>>> Cell: 716/424-3311
>> >>>> ________________________________________________
>> >>>>
>> >>>> -----BEGIN GEEK CODE BLOCK-----
>> >>>> Version: 1.0
>> >>>> GCS/IT d+ s a C++ UL+++$ P+(++) L+++ E---
>> >>>> W+++ N+ o K(+) w--- O- M-- V-- PS+ PE Y(+)
>> >>>> PGP++(+++) t+ 5-- X-- R+ tv+ b++ DI++ D++
>> >>>> G++ e(+) h--- r+++ y+++*
>> >>>> ------END GEEK CODE BLOCK------
>> >>>>
>> >>>>
>> >>>> On Sat, Mar 18, 2023 at 1:40 PM Kevin Huntly <kmhun...@gmail.com>
>> >> wrote:
>> >>>>
>> >>>>> any other ideas guys? I want to migrate a bunch of really awful
>> >>>>> apps
>> >> off
>> >>>>> our primary application server so they don't cause us headaches
>> >> anymore.
>> >>>>> if
>> >>>>> I can't get one app working I have no hope of getting others to
>> >>>>> work
>> >> lol
>> >>>>>
>> >>>>> On Sat, Mar 18, 2023, 09:16 John Dale (DB2DOM) <jcdw...@gmail.com>
>> >>>>> wrote:
>> >>>>>
>> >>>>>> Thanks Mark - are statics reloaded now, too?
>> >>>>>>
>> >>>>>> I touch web.xml and it's reloaded successfully hundreds of times.
>> >>>>>>
>> >>>>>> But I don't use war files so I can use git to version and transfer
>> my
>> >>>>>> builds ... maybe that's the reason?
>> >>>>>>
>> >>>>>> John
>> >>>>>>
>> >>>>>>
>> >>>>>> On 3/18/23, Mark Thomas <ma...@apache.org> wrote:
>> >>>>>>> On 17/03/2023 23:18, John Dale (DB2DOM) wrote:
>> >>>>>>>> ok - "mnet" should be "ment"
>> >>>>>>>
>> >>>>>>> From the logs excerpt I saw earlier in the thread, that needs
>> >> fixing
>> >>>>>>> (although it was only a test element). I don't think it will
>> >>>>>>> break
>> >>>>>>> anything else but better to remove the noise from the logs.
>> >>>>>>>
>> >>>>>>>> I figured I'd spell that out and behave like a compiler. :)
>> >>>>>>>>
>> >>>>>>>> I would also move that configuration into server.xml (it's a
>> >>>>>>>> major
>> >>>>>>>> difference between your configuration and mine).
>> >>>>>>>
>> >>>>>>> That configuration style is NOT recommended. It means you have no
>> >>>>>> choice
>> >>>>>>> but to restart Tomcat if you change the Context configuration. If
>> it
>> >>>>>>> is
>> >>>>>>> in a separate Context file, Tomcat will reload the web
>> >>>>>>> application
>> >>>>>>> automatically if you change the Context file.
>> >>>>>>>
>> >>>>>>> Stick with:
>> >>>>>>>
>> >>>>>>
>> >>
>> /opt/Apache/Tomcat/apache-tomcat-9.0.73/conf/Catalina/localhost/esolutions.xml
>> >>>>>>>
>> >>>>>>> Do NOT specify a path attribute for the Context. It will be
>> ignored.
>> >>>>>>>
>> >>>>>>> Where is the JDBC driver located? It needs to be in
>> >>>>>> ${CATALINA_BASE}/lib
>> >>>>>>> and not part of the WAR.
>> >>>>>>>
>> >>>>>>> Can we see the full logs from a clean start-up please?
>> >>>>>>>
>> >>>>>>> Mark
>> >>>>>>>
>> >>>>>>>
>> >>>>>>>>
>> >>>>>>>> Lastly, maybe to help debug a future issue, did you compile your
>> >>>>>>>> project files against the tomcat libs included with your
>> >>>>>>>> distribution,
>> >>>>>>>> or did you drop them into this version of tomcat from another
>> >>>>>>>> version?
>> >>>>>>>> Probably won't matter since you should be coded to the
>> >> interfaces,
>> >>>>>>>> but one never knows.
>> >>>>>>>>
>> >>>>>>>> John
>> >>>>>>>>
>> >>>>>>>> On 3/17/23, Kevin Huntly <kmhun...@gmail.com> wrote:
>> >>>>>>>>> no I think it has something to do with it but I'm not sure.
>> >>>>>>>>> I'll
>> >>>>>>>>> try
>> >>>>>>>>> taking
>> >>>>>>>>> out the environment values and see what happens
>> >>>>>>>>>
>> >>>>>>>>> On Fri, Mar 17, 2023, 19:11 John Dale (DB2DOM) <
>> jcdw...@gmail.com
>> >>>
>> >>>>>>>>> wrote:
>> >>>>>>>>>
>> >>>>>>>>>> In the log you sent below, I see a typo:
>> >>>>>>>>>> Context/Environmnet
>> >>>>>>>>>>
>> >>>>>>>>>> Does that have something to do with it, or is this a typo in
>> >>>>>>>>>> tomcat
>> >>>>>>>>>> logging?
>> >>>>>>>>>>
>> >>>>>>>>>>
>> >>>>>>>>>>
>> >>>>>>>>>>
>> >>>>>>>>>> On 3/17/23, Kevin Huntly <kmhun...@gmail.com> wrote:
>> >>>>>>>>>>> yes, under Catalina/localhost
>> >>>>>>>>>>>
>> >>>>>>>>>>> On Fri, Mar 17, 2023, 19:07 John Dale (DB2DOM)
>> >>>>>>>>>>> <jcdw...@gmail.com>
>> >>>>>>>>>> wrote:
>> >>>>>>>>>>>
>> >>>>>>>>>>>> Are you modifying a context.xml file in the conf folder?
>> >>>>>>>>>>>>
>> >>>>>>>>>>>> On 3/17/23, Kevin Huntly <kmhun...@gmail.com> wrote:
>> >>>>>>>>>>>>> Also of note:
>> >>>>>>>>>>>>>
>> >>>>>>>>>>>>> 17-Mar-2023 17:25:42.113 INFO [main]
>> >>>>>>>>>>>>> org.apache.catalina.startup.HostConfig.deployDescriptor
>> >>>>>>>>>>>>> Deploying
>> >>>>>>>>>>>>> deployment descriptor
>> >>>>>>>>>>>>>
>> >>>>>>>>>>>>
>> >>>>>>>>>>
>> >>>>>>
>> >>
>> [/opt/Apache/Tomcat/apache-tomcat-9.0.73/conf/Catalina/localhost/esolutions.xml]
>> >>>>>>>>>>>>> 17-Mar-2023 17:25:42.174 WARNING [main]
>> >>>>>>>>>>>>> org.apache.tomcat.util.digester.Digester.endElement No
>> >>>>>>>>>>>>> rules
>> >>>>>> found
>> >>>>>>>>>>>> matching
>> >>>>>>>>>>>>> [Context/Environmnet]
>> >>>>>>>>>>>>> ________________________________________________
>> >>>>>>>>>>>>>
>> >>>>>>>>>>>>> Kevin Huntly
>> >>>>>>>>>>>>> Email: kmhun...@gmail.com
>> >>>>>>>>>>>>> Cell: 716/424-3311
>> >>>>>>>>>>>>> ________________________________________________
>> >>>>>>>>>>>>>
>> >>>>>>>>>>>>> -----BEGIN GEEK CODE BLOCK-----
>> >>>>>>>>>>>>> Version: 1.0
>> >>>>>>>>>>>>> GCS/IT d+ s a C++ UL+++$ P+(++) L+++ E---
>> >>>>>>>>>>>>> W+++ N+ o K(+) w--- O- M-- V-- PS+ PE Y(+)
>> >>>>>>>>>>>>> PGP++(+++) t+ 5-- X-- R+ tv+ b++ DI++ D++
>> >>>>>>>>>>>>> G++ e(+) h--- r+++ y+++*
>> >>>>>>>>>>>>> ------END GEEK CODE BLOCK------
>> >>>>>>>>>>>>>
>> >>>>>>>>>>>>>
>> >>>>>>>>>>>>> On Fri, Mar 17, 2023 at 5:24 PM Kevin Huntly
>> >>>>>>>>>>>>> <kmhun...@gmail.com
>> >>>>>>>
>> >>>>>>>>>>>>> wrote:
>> >>>>>>>>>>>>>
>> >>>>>>>>>>>>>> Here's my santized server.xml and context.xml
>> >>>>>>>>>>>>>>
>> >>>>>>>>>>>>>> server.xml -> https://pastebin.com/Bj6Wh0qU
>> >>>>>>>>>>>>>> context.xml -> https://pastebin.com/Z3dBf3eK
>> >>>>>>>>>>>>>>
>> >>>>>>>>>>>>>
>> >>>>>>>>>>>>
>> >>>>>>>>>>>>
>> >>>>>>
>> ---------------------------------------------------------------------
>> >>>>>>>>>>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> >>>>>>>>>>>> For additional commands, e-mail:
>> >>>>>>>>>>>> users-h...@tomcat.apache.org
>> >>>>>>>>>>>>
>> >>>>>>>>>>>>
>> >>>>>>>>>>>
>> >>>>>>>>>>
>> >>>>>>>>>>
>> >>>>>>
>> ---------------------------------------------------------------------
>> >>>>>>>>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> >>>>>>>>>> For additional commands, e-mail: users-h...@tomcat.apache.org
>> >>>>>>>>>>
>> >>>>>>>>>>
>> >>>>>>>>>
>> >>>>>>>>
>> >>>>>>>>
>> >> ---------------------------------------------------------------------
>> >>>>>>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> >>>>>>>> For additional commands, e-mail: users-h...@tomcat.apache.org
>> >>>>>>>>
>> >>>>>>>
>> >>>>>>>
>> >> ---------------------------------------------------------------------
>> >>>>>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> >>>>>>> For additional commands, e-mail: users-h...@tomcat.apache.org
>> >>>>>>>
>> >>>>>>>
>> >>>>>>
>> >>>>>>
>> ---------------------------------------------------------------------
>> >>>>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> >>>>>> For additional commands, e-mail: users-h...@tomcat.apache.org
>> >>>>>>
>> >>>>>>
>> >>>
>> >>
>> >> ---------------------------------------------------------------------
>> >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> >> For additional commands, e-mail: users-h...@tomcat.apache.org
>> >>
>> >>
>> >
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>
>>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
